aboutsummaryrefslogtreecommitdiffstats
path: root/.github/workflows/scan.yml
diff options
context:
space:
mode:
Diffstat (limited to '.github/workflows/scan.yml')
-rw-r--r--.github/workflows/scan.yml32
1 files changed, 32 insertions, 0 deletions
diff --git a/.github/workflows/scan.yml b/.github/workflows/scan.yml
new file mode 100644
index 00000000..ed69aed7
--- /dev/null
+++ b/.github/workflows/scan.yml
@@ -0,0 +1,32 @@
+name: scan
+
+on:
+ push:
+ branches: [ master ]
+ pull_request:
+ branches: [ master ]
+ schedule:
+ - cron: '0 12 * * 6'
+
+permissions:
+ security-events: write
+
+jobs:
+ codeql:
+ runs-on: ubuntu-latest
+ steps:
+ - name: Checkout repository
+ uses: actions/checkout@v4
+ with:
+ fetch-depth: 2
+
+ - name: Initialize CodeQL
+ uses: github/codeql-action/init@v3
+ with:
+ languages: go, javascript
+
+ - name: Autobuild
+ uses: github/codeql-action/autobuild@v3
+
+ - name: Perform CodeQL Analysis
+ uses: github/codeql-action/analyze@v3